DMasti Network: SCADA Hacking

<div dir="ltr" style="text-align: left;" trbidi="on"><div class="separator" style="clear: both; text-align: justify;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj9abnMTtOIJVbzNKWZ_5ZpapVvVQEeSc5qPnPCtk2195j_RnAJBWiSGCHBlgkPh9eulRGeRm7d4F5lqdXKzgxylfcdXP4kGT-_fRlN9DHshEF6MGKkm4Nv_gyArA9t1Ua67Fq8RzGJysk/s1600/Scalance-X200-critical-security-vulnerability.jpg" imageanchor="1" style="clear: right; float: right; margin-bottom: 1em; margin-left: 1em;"><img border="0" height="320" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj9abnMTtOIJVbzNKWZ_5ZpapVvVQEeSc5qPnPCtk2195j_RnAJBWiSGCHBlgkPh9eulRGeRm7d4F5lqdXKzgxylfcdXP4kGT-_fRlN9DHshEF6MGKkm4Nv_gyArA9t1Ua67Fq8RzGJysk/s320/Scalance-X200-critical-security-vulnerability.jpg" width="313" /></a></div><div style="text-align: justify;">A Security researcher has discovered two potential vulnerabilities in Siemens Ethernet switches allows a remote attacker to perform administrative operations.<br /><br />The vulnerabilities were discovered by Eireann Leverett, Senior security consultant for IOActive and have been reported to Siemens.<br /><br />The first vulnerability(CVE-2013-5944) could allow hackers to perform administrative operation over the network without authentication.<br /><br />Sponsored Links<br />The Second vulnerability (CVE-2013-5709) could allow hackers to hijack web sessions over the network without authentication. This is due to insufficient entropy in its random number generator.<br /><br />Siemens produced a patch within 3 months.  Customers of Siemens are advised to apply the SCALANCE X-200 firmware update.<br /><br />Eireann is scheduled to demonstrate the vulnerabilities and release proof-of-concept code for organizations to check their own devices, at next week's S4 SCADA security conference in Miami.</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">Dated: Monday, January 13, 2014</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;"><br /></div><div style="text-align: justify;"><br /></div></div>

Vulnerability in Siemens Switches allows hackers to gain admin access

A Security researcher has discovered two potential vulnerabilities in Siemens Ethernet switches allows a remote attacker to perform administ...